Improve the overall interface/functionality of the module

[aaaaahaaaaa]

TL;DR

Quick feedback that I generally find the interface of the module weirdly designed and not particularly useful in its current state. In particular the fact the modules shares the same config for multiple accounts. And the module should also support IAM policies.

I think the following interface would be a lot more useful:

module "service_accounts" {
  project = local.project

  service_accounts = {

    "service-account-a": {
      display_name = "Service Account A"
      generate_key = true,
      roles        = [
        "roles/bigquery.dataEditor",
        "roles/storage.admin",
      ]
      policies = {
        "roles/iam.workloadIdentityUser" = [...]
      }
    },

    "service-account-b": {
      display_name = "Service Account B",
      roles = [
        "roles/bigquery.dataEditor",
        "roles/storage.admin",
      ],
      policies = {
        "roles/iam.workloadIdentityUser" = [...]
      }
    },

  }
}

Terraform Resources

No response

Detailed design

No response

Additional information

No response